Generic endpoint command - Developer Guide - Cortex XSIAM - Cortex

Generic endpoint command - Developer Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Developer Guide

Product

Cortex XSIAM

Creation date

2023-05-01

Last date published

2024-06-04

Category

Developer Guide

Abstract

Endpoint command generalized across similar integrations with endpoint providers.

Cortex XSIAM supports many integrations with endpoint providers, for example, GuardiCoreV2.

The following is the generic endpoint command.

Returns information about an endpoint.

- name: endpoint
   arguments:
   - default: false
     description: The endpoint ID.
     isArray: false
     name: id
     required: false
     secret: false
    - default: true
     description: The endpoint IP address.
     isArray: false
     name: ip
     required: false
     secret: false
    - default: false
     description: The endpoint hostname.
     isArray: false
     name: hostname
     required: false
     secret: false
    deprecated: false